About:
The Cyrus IMAP server is generally intended to be run on sealed systems, where normal users are not permitted to log in. The mailbox database is stored in parts of the filesystem that are private to Cyrus. All user access to mail is through the IMAP, POP3, or KPOP protocols. The private mailbox database design gives the server large advantages in efficiency, scalability, and administratability. Multiple concurrent read/write connections to the same mailbox are permitted. The server supports access control lists on mailboxes and storage quotas on mailbox hierarchies, multiple SASL mechanisms, and the Sieve mail filtering language.

Release focus: Minor security fixes

Changes:
This release fixes several buffer overflows, most of which are single byte overflows in mailbox name handling. A more serious issue was fixed in the NNTP injection handling code.

Author:
Carnegie Mellon <cyrus (dash) bugs (at) andrew (dot) cmu (dot) edu> [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.73/10.00 (24 votes)

Tar/GZ:
ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/
CVS tree (cvsweb):
http://bugzilla.andrew.cmu.edu/cvsweb/src/cyrus/

Trove categories: [change]

[License]		OSI Approved
[Topic]		Communications :: Email :: Post-Office :: IMAP, Internet

Dependencies: [change]
No dependencies filed

 Branches

Branch	Version	Last release	License	URLs
2.1 Historic	2.1.17	23-Nov-2004	OSI Approved
2.2 Stable	2.2.12	01-Mar-2005	OSI Approved

 Releases

Version	Focus	Date
2.2.12	Minor security fixes	01-Mar-2005 17:11
2.2.10	Minor security fixes	23-Nov-2004 22:05
2.2.9	Minor security fixes	23-Nov-2004 00:29
2.2.7	Major bugfixes	26-Jul-2004 20:40
2.2.6	Major bugfixes	18-Jun-2004 20:37
2.2.5	Major bugfixes	29-May-2004 04:24
2.2.4	Minor feature enhancements	18-May-2004 18:13
2.2.3	Minor feature enhancements	15-Jan-2004 19:23
2.2.2-BETA	Major feature enhancements	28-Oct-2003 21:48
2.2.1-BETA	Major feature enhancements	17-Jul-2003 18:15

 Articles referencing this project

• SuSE: New cyrus-imapd packages fix buffer overflows
  by Patrick Lenz , in Security
  Thu, Feb 24th 2005 09:04
  
• SuSE: New cyrus-imapd packages fix remote command execution
  by Patrick Lenz , in Security
  Fri, Dec 3rd 2004 06:09
  
• Debian: New cyrus-imapd packages fix remote command
  by Patrick Lenz , in Security
  Mon, Dec 23rd 2002 06:51
  

 Comments

[»] 2.1.x RPMs for RedHat 7.x
by simix - Jul 29th 2002 04:56:22

I have created 2.1.x RPMs for RH 7.x.
For now, you can find them here:
http://home.teleport.ch/simix/

[reply] [top]

[»] RPM packages available
by Ramiro - Jul 20th 2001 18:16:33

The URL (where full description and release notes can be found) is:
http://rmrpms.tripod.com/cyrus-imapd/
The packages can be compiled and installed in Red Hat Linux 6.2, 7 and 7.1.

--
Ramiro

[reply] [top]

[»] Re: RPM packages available - site moved
by winnetou - Jun 15th 2002 16:24:43

* Wed Mar 13 2002
- Move page to new hosting site.
 
it is now at: http://rmorales.modwest.com/rpms/cyrus-imapd/

[reply] [top]

---